Four files moved up one level: the sandbox defends paths, not intentions, and a renamed folder is enough to read a secret.